docs: document verified Coinbase webhook-to-CLAS receipt flow

[GsCommand]

Motivation

• Make it easy to exercise and verify the end-to-end Coinbase webhook → CLAS receipt flow locally by documenting the test command, expected endpoint output, verifier command, expected verification output, and the trust chain.

Description

• Added a ## Verified local test flow section to docs/integrations/coinbase-cdp-webhook-receipts.md that documents the local test helper (node test-coinbase-webhook.js), the expected endpoint result fields (status: WEBHOOK_VERIFIED_AND_SIGNED, signer: runtime.commandlayer.eth, kid: vC4WbcNoq2znSCiQ, canonicalization: json.sorted_keys.v1), the verification curl command against https://www.commandlayer.org/api/verify, the expected verification result fields (status: VERIFIED, hash_matches: true, signature_valid: true, ens_resolved: true, key_id: vC4WbcNoq2znSCiQ), the concise trust chain, and a security note not to commit webhook secrets or private keys.
• Updated public/integrations.html with a short public-facing note: Coinbase webhook example now supports signed CLAS receipts after HMAC verification.

Testing

• Ran the repository test suite with npm test, which completed successfully with all tests passing (80 tests, 0 failures).
• No secrets, private keys, or webhook secrets were added to the repository in these changes.

---

Codex Task

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
commandlayer-commandlayer-org	Ready	Preview, Comment	May 23, 2026 9:16pm
commandlayer-org	Ready	Preview, Comment	May 23, 2026 9:16pm
commandlayer-org111	Ready	Preview, Comment	May 23, 2026 9:16pm